Lucene search
+L

6937 matches found

CNNVD
CNNVD
added 2025/06/17 12:0 a.m.9 views

WordPress plugin WP Job Portal SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.1AI score0.00292EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.8 views

PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter testtype in the file...

9.8CVSS7.9AI score0.00421EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/06/16 12:0 a.m.5 views

HAMASTAR Technology WIMP website co-construction management platform SQL注入漏洞

HAMASTAR Technology WIMP website co-construction management platform is a management platform of HAMASTAR Technology Taiwan, China. A SQL injection vulnerability exists in the HAMASTAR Technology WIMP website co-construction management platform, which is vulnerable to SQL injection attacks...

9.8CVSS7.8AI score0.00462EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/16 12:0 a.m.8 views

Code-Projects Restaurant Order System 注入漏洞

Code-Projects Restaurant Order System is a Code-Projects open source restaurant order system . Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameter ID in the file /tablelow.php...

9.8CVSS7.7AI score0.00399EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/06/12 12:0 a.m.7 views

like-girl 安全漏洞

like-girl is a couple logging tool by the individual developer of kiCode111 in China. A security vulnerability exists in like-girl version 5.2.0, which originates from SQL injection due to incorrect operation of parameter id/imgText/imgDatd/imgUrl in file /admin/ImgUpdaPost.php...

7.2CVSS5.6AI score0.00347EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/06/12 12:0 a.m.7 views

like-girl 安全漏洞

like-girl is a couple logging tool by the individual developer of kiCode111 in China. A security vulnerability exists in like-girl version 5.2.0, which originates from SQL injection due to the incorrect operation of the parameter bz/ipdz in the file /admin/ipAddPost.php...

7.2CVSS5.6AI score0.00343EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/12 12:0 a.m.10 views

uptrace pgdriver 安全漏洞

uptrace pgdriver is an extension library for Golang from uptrace Moldova. A security vulnerability exists in uptrace pgdriver version v1.2.1, which stems from an unvalidated appendArg function in the /pgdriver/format.go file, which could lead to an SQL injection attack...

6.5CVSS7.9AI score0.00334EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/06/11 12:0 a.m.6 views

Medical Card Generation System /admin/readenq.php File SQL Injection Vulnerability

Medical Card Generation System is a medical card generation system. The Medical Card Generation System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the /admin/readenq.php file. An attacker can...

8.8CVSS7AI score0.0037EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.9 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-321946)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2025/06/11 12:0 a.m.6 views

Complaint Management System /admin/edit-subcategory.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter subcategory in the file /admin/edit-subcategory.php. An attacker can...

8.8CVSS8.2AI score0.00325EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.4 views

Human Metapneumovirus Testing Management System /search-report-result.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter...

8.8CVSS8.3AI score0.00325EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/06/11 12:0 a.m.10 views

The vulnerability of the notification module of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus allows a perpetrator to execute arbitrary code.

The vulnerability of the notification module of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

8.7CVSS6.1AI score0.01277EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2025/06/11 12:0 a.m.6 views

Dairy Farm Shop Management System /add-product.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter productname in the file...

9.8CVSS7.9AI score0.00534EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.6 views

Dairy Farm Shop Management System /sales-report-details.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter fromdate/todate in the file...

9.8CVSS8.3AI score0.00648EPSS
SaveExploits1References1
OSV
OSV
added 2025/06/10 10:15 a.m.7 views

CVE-2025-40655

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name parameter in /antcatalogue.asp...

9.8CVSS5.7AI score0.00312EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/06/10 12:0 a.m.7 views

Patient Record Management System view_dental.ph File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter itrno in the file /viewdental.php. An attacker can...

7.5CVSS8.3AI score0.00314EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/10 12:0 a.m.4 views

Patient Record Management System birthing.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter itrno/compid in the file /birthing.php. An attacker can...

7.5CVSS8.3AI score0.00314EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/10 12:0 a.m.5 views

Employee Record Management System /admin/allemployees.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/allemployees.php. An...

8.8CVSS7.1AI score0.00325EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.6 views

Microsoft Office Sharepoint Server SQL注入漏洞

Microsoft SharePoint Server is a groupware for Windows Server made by Microsoft that provides basic portal and corporate intranet functionality. A remote code execution vulnerability exists in Microsoft SharePoint Server, which can be exploited by an attacker to execute arbitrary code on the syst...

8.8CVSS8.4AI score0.01564EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/06/09 4:15 p.m.5 views

CVE-2025-47651

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affects Infility Global: from n/a through = 2.15.06...

8.5CVSS5.5AI score0.00267EPSS
SaveExploits0References3
Rows per page
Query Builder